Zip files, Help!!!

[Mark Friedel]

Here's the scoop.  Mailscanner v4.28.6 w/ f-prot, clamav, and
spamassassin v2.63.

We used to allow zip files.  Then the Mydoom hell hit us.

I denied .zip files in my filename.rules.conf.

The storm blew over, but we're still nervous.

We'd like to turn .zip files back on in the filename.rules.conf, to
allow the casual user to send files back and forth.

I'd like to set "Allow Password-Protected Archives" to no to block stuff
that can't be scanned by f-prot.

But we have users that send mail to business partners via mainframe JCL
that has to be password-protected.

Does an "allow" in the filename rules override the "Allow
Password-Protected Archives = no" test?  I thought of having them use a
specific extension that would pass through Mailscanner unscathed.

Any other thoughts on this problem?

Thanks
Mark Friedel
mfriedel at wpsic.com